This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/AE231146010611F1AF8CD7E0DAE4EC9C.roa
File:                     AE231146010611F1AF8CD7E0DAE4EC9C.roa (raw, json)
Hash identifier:          yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=
Subject key identifier:   38:22:D0:A3:3E:A2:E8:13:12:C3:55:30:E2:62:D7:FB:43:F2:09:72
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       07
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/AE231146010611F1AF8CD7E0DAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 13:46:03 +0000
ROA not before:           Tue 03 Feb 2026 13:45:57 +0000
ROA not after:            Mon 03 Feb 2031 13:45:57 +0000
asID:                     329054
IP address blocks:        102.216.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Feb  3 13:45:57 2026 GMT
            Not After : Feb  3 13:45:57 2031 GMT
        Subject: CN=6981fc1b-f26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:89:dd:a2:5f:72:17:0f:00:3b:51:4f:50:
                    5f:d8:b7:75:46:4e:21:9b:fd:8b:64:d3:60:8c:7a:
                    69:11:1d:7a:5f:cc:71:df:09:6a:ab:63:e1:52:3e:
                    16:39:2d:6f:d7:43:42:8a:a1:60:46:86:f9:73:78:
                    98:24:07:45:b7:0b:55:ec:7f:18:6a:5e:a7:ac:c0:
                    66:7a:ee:88:f9:48:85:d5:13:84:36:6f:c1:9d:e7:
                    7a:f2:17:8d:56:81:7e:d1:e3:e8:75:04:42:19:82:
                    61:7e:37:a4:c8:b9:82:06:8e:5d:79:4b:10:91:0a:
                    47:14:10:67:eb:7e:94:9f:87:76:74:73:7f:c8:c5:
                    a8:ab:10:53:84:a1:ff:94:02:03:5d:d5:2d:dd:47:
                    82:d7:a5:65:41:19:2c:5b:98:c2:0f:37:f2:02:70:
                    ef:ff:e4:7f:d3:c0:db:87:b0:65:c6:0e:c5:44:04:
                    2a:0e:30:16:2e:5e:56:1a:c8:3a:48:cf:1e:3f:17:
                    1c:9a:17:46:e1:e4:df:82:04:d7:db:5e:20:aa:f0:
                    6b:4f:3b:2b:cb:32:9b:f7:99:b2:4c:fd:80:d0:d7:
                    9e:2a:68:94:00:7a:c2:99:f2:67:d7:ed:3c:85:ed:
                    7c:d1:ed:cb:90:b7:fe:36:a7:77:8f:bf:a2:0e:4e:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:D0:A3:3E:A2:E8:13:12:C3:55:30:E2:62:D7:FB:43:F2:09:72
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/AE231146010611F1AF8CD7E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:06:3a:80:1f:3d:23:b9:c9:26:db:27:84:ec:72:5e:f9:
         8e:1f:5b:76:d3:48:35:9c:5b:17:f0:b8:a3:3a:50:55:c0:f8:
         ef:aa:5b:76:1c:50:cc:be:91:c3:a7:56:91:97:ef:f1:95:03:
         c2:fe:2b:80:be:a7:25:1e:43:20:54:87:35:dd:48:b2:ea:58:
         9d:ee:87:f0:56:08:40:b8:76:22:41:e4:56:b7:44:ad:8a:da:
         b9:c4:7c:ba:92:93:f6:77:09:91:e2:e0:46:aa:f6:11:9c:28:
         e0:8d:a1:6c:c7:30:fc:10:82:9f:01:7f:5d:d0:a5:60:b3:d9:
         4a:99:3d:b9:7c:b8:a3:c9:8a:21:8e:5e:3d:92:e0:d8:c4:57:
         8e:06:30:5f:eb:fb:57:fc:b3:83:45:74:e4:fd:b3:87:69:09:
         46:c9:a4:a6:49:7f:19:9f:74:5f:a3:b5:b4:e3:7c:bc:82:ce:
         71:03:4f:02:db:bc:ee:b3:a8:1e:c8:e0:76:1b:bc:4a:e3:f7:
         c3:16:23:ed:51:e8:cd:e4:05:09:35:dc:8e:00:fe:87:55:d4:
         20:48:41:ac:0d:4c:34:2a:f1:b9:37:2b:88:ac:48:7a:e8:9d:
         91:db:7a:bf:cb:70:51:90:03:43:e9:32:cd:99:23:9c:93:ad:
         63:77:c8:1f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
OUFFNkFGMTEwLwYDVQQFEygxRTMwNkQxMTExQkQzMTRGNjBGNzhGQzI5QjE3RkJD
NkFCMDhCNTg5MB4XDTI2MDIwMzEzNDU1N1oXDTMxMDIwMzEzNDU1N1owGDEWMBQG
A1UEAxMNNjk4MWZjMWItZjI2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCzid2iX3IXDwA7UU9QX9i3dUZOIZv9i2TTYIx6aREdel/Mcd8Jaqtj4VI+
Fjktb9dDQoqhYEaG+XN4mCQHRbcLVex/GGpep6zAZnruiPlIhdUThDZvwZ3nevIX
jVaBftHj6HUEQhmCYX43pMi5ggaOXXlLEJEKRxQQZ+t+lJ+HdnRzf8jFqKsQU4Sh
/5QCA13VLd1HgtelZUEZLFuYwg838gJw7//kf9PA24ewZcYOxUQEKg4wFi5eVhrI
OkjPHj8XHJoXRuHk34IE19teIKrwa087K8sym/eZskz9gNDXnipolAB6wpnyZ9ft
PIXtfNHty5C3/jand4+/og5Osg8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ4ItCj
PqLoExLDVTDiYtf7Q/IJcjAfBgNVHSMEGDAWgBQeMG0REb0xT2D3j8KbF/vGqwi1
iTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzlBRTYvMUZFMjA1RDJGRDA5MTFGMEIzMUUyQkQ3REFFNEVDOUMvSGpCdEVS
RzlNVTlnOTRfQ214Zjd4cXNJdFlrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSGpCdEVSRzlNVTlnOTRfQ214Zjd4cXNJdFlrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzlBRTYvMUZFMjA1RDJGRDA5MTFGMEIzMUUyQkQ3REFF
NEVDOUMvQUUyMzExNDYwMTA2MTFGMUFGOENEN0UwREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbYgDANBgkqhkiG9w0BAQsF
AAOCAQEAPYoGOoAfPSO5ySbbJ4Tscl75jh9bdtNINZxbF/C4ozpQVcD476pbdhxQ
zL6Rw6dWkZfv8ZUDwv4rgL6nJR5DIFSHNd1IsupYne6H8FYIQLh2IkHkVrdErYra
ucR8upKT9ncJkeLgRqr2EZwo4I2hbMcw/BCCnwF/XdClYLPZSpk9uXy4o8mKIY5e
PZLg2MRXjgYwX+v7V/yzg0V05P2zh2kJRsmkpkl/GZ90X6O1tON8vILOcQNPAtu8
7rOoHsjgdhu8SuP3wxYj7VHozeQFCTXcjgD+h1XUIEhBrA1MNCrxuTcriKxIeuid
kdt6v8twUZADQ+kyzZkjnJOtY3fIHw==
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:12 2026 by rpki-client